Privacy Policy for forms
Last updated: 21 July 2026
This policy explains how personal data submitted through contact forms on Aleksandra Malinkiewicz’s website is processed, including forms related to figure skating coaching and stretching classes.
Data controller
The controller of your personal data is Aleksandra Malinkiewicz. For privacy-related matters, you can contact the controller at: [email protected].
What data we collect
Through the form, we may receive the details you enter, in particular your full name, email address, phone number, subject and message. Fields marked with an asterisk are required to send the form, while other details are provided voluntarily.
The forms may also pass basic technical information connected with handling the message, such as the page URL from which the form was sent, the sending date or technical email data.
The forms also use Cloudflare Turnstile, an anti-spam protection tool. In connection with Turnstile, Cloudflare may process technical signals from your browser and device, such as your IP address, User-Agent header, site identifier, verification token and other data needed to distinguish a real user from an automated submission.
Purposes and legal bases
We process your data to reply to your enquiry, arrange class details, present a cooperation proposal or continue correspondence related to your message.
The legal basis is Article 6(1)(b) GDPR where you contact us to take steps before entering into a contract, and Article 6(1)(f) GDPR, meaning the controller’s legitimate interest in handling correspondence, responding to enquiries and, where needed, protecting against claims.
Technical data connected with Turnstile is processed on the basis of Article 6(1)(f) GDPR, meaning the legitimate interest in protecting forms against spam, abuse and automated submissions.
Recipients of data
Your data may be accessed by providers that help operate the website, hosting, email and administration tools, only to the extent needed to provide those services. Your data is not sold or shared with other entities for their marketing purposes.
Technical data connected with anti-spam protection may be received by Cloudflare, Inc., the provider of Turnstile. You can find more information in the Cloudflare Turnstile privacy notice.
Transfers outside the EEA
In connection with technical services, including Cloudflare Turnstile, data may be processed outside the European Economic Area. If such a transfer takes place, it is made using mechanisms required by the GDPR, such as an adequacy decision or standard contractual clauses.
How long we keep data
We keep form data for the time needed to handle the enquiry and related correspondence, and then for no longer than 12 months from the last contact, unless longer storage is needed because of claims, legal obligations or a concluded agreement.
Your rights
You have the right to request access to your data, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interest. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office.
Providing data voluntarily
Providing data is voluntary, but the details required in the form are necessary to send a message and receive a reply.
Automated decisions
Cloudflare Turnstile automatically assesses whether interaction with a form appears to come from a person or from automated activity. However, we do not use form data for profiling or for automated decisions that produce legal effects concerning you or similarly significantly affect you.
Enquiries concerning minors
If the form concerns a minor, the message should be sent by a parent or legal guardian, or with their knowledge and consent.